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We construct new entanglement distillation protocols by interpolating between the recurrence 
and hashing protocols. This leads to asymptotic two-way distillation protocols, resulting in an 
improvement of the distillation rate for all mixed Bell diagonal entangled states, even for the ones 
with very high fidelity. We also present a method how entanglement-assisted distillation protocols 
can be converted into non-entanglement-assisted protocols with the same yield. 
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I. INTRODUCTION 

One of the big achievements in entanglement theory 
has been to prove that it is possible to get around the 
effects of decoherence using an amount of resources that 
only scales linearly with the number of pure resources one 
would need. Entanglement distillation and quantum er- 
ror correction enables to distribute maximally entangled 
states between different parties in the present of a noisy 
environment and imperfect quantum channels. This ba- 
sic task is one of the requirements, if we want to apply 
the new applications provided by Quantum information 
theory in a realistic unperfect situation. 

Entangled states, in particular pure maximally entan- 
gled states, are used as a resource in many protocols in 
quantum information theory and entanglement of distil- 
lation is the most reasonable measure for entanglement 
respecting this resource character. Given n copies of a 
bipartite state p, where the both subsystems are respec- 
tively owned by two distinct physicists called Alice and 
Bob, the task is to transform these states into m copies 
of maximally entangled states. To fulfill this task, Alice 
and Bob are allowed to make any sequence of local opera- 
tions on her/his site and they can coordinate their efforts 
via a classical channel. The set of operations accessible 
in this way is called LOCC (local operations and clas- 
sical communication). The best possible rate m/n they 
could archive (in the asymptotic limit of many copies) 
defines the distillable entanglement. The latter quan- 
tifies in some sense the amount of useful entanglement 
contained in the state p. Furthermore, one can think of 
a situation, where Alice and Bob have already a (maybe 
infinite) pool of predistilled maximally entangled states. 
The goal is now to enlarge the number of maximally en- 
tangled states in their pool at the end of the protocol, but 
in between maximally entangled states can be abused for 
establishing non local operation. Such a protocol is called 
an entanglement assisted protocol. 

Generically, starting with a finite number n of copies, it 
is never possible to generate maximally entangled states 
by means of LOCC operations. Purely maximally en- 
tangled states can only be achieved by an asymptotic 
protocol, i.e., in the limit of the number of copies going 
to infinity. 

The construction of such asymptotic distillation pro- 
tocols leading to a non zero rate is a nasty task and es- 



sentially all known protocols are only improved versions 
of the hashing/breeding distillation protocol presented in 
P, @ , which is adapted to Bell diagonal states of a two 
qubit system. This protocol was recently generalized to 
arbitrary states in arbitrary dimensions [3]. 

The hashing/breeding protocol is a so called one way 
distillation protocol, what means, that the classical infor- 
mation is only sent in one direction, e.g. from Alice to 
Bob, but not in the other way. The great advantage of 
such kind of protocols is, that they are directly related to 
quantum error correction codes |2|. But it is well known, 
that one way distillation protocols are not optimal Q. 

One easy way to upgrade a one way distillation proto- 
col to a two way distillation protocol, is to add a prefixed 
two way operation, like a pre-selection of states based on 
a measurement outcome, acting respectively only on a 
few copies. The states produced this way are used as new 
input for the one way distillation protocol. The proto- 
type of such a protocol is the recurrence protocol, where 
two copies of a states are mapped by a two way opera- 
tion to a higher entangled states, which is distilled by the 
(one way) hashing protocol. Much effort has been spent 
to optimize or modify such kind of recurrence methods 
0[iJDjl[T3 The problem that all this protocols share, is 
that the two way communication part is not asymptotic, 
resulting in an improvement of the distillation rates only 
for states with relatively low entanglement. 

The present paper is devoted to develop the first 
asymptotical two way distillation protocol. The following 
results are obtained: 

• We provide an entanglement assisted two way dis- 
tillation protocol for Bell diagonal two qubit states. 

• We show this protocol to give a strictly positive 
improvement for all Bell diagonal states, expect for 
the low rank cases, where the hashing protocol was 
already known to be optimal. 

• We show how to further improve the rates and cal- 
culate some examples on Werner states. 

• We show how to transform this protocols into distil- 
lation protocols, that did not need any pre-distilled 
entanglement. 

• We hope to give a better understanding of the 
breeding protocol and its relation to the recurrence 
protocol. 



2 



II. PRELIMINARIES 

The new distillation protocol we want to introduce will 
be applied to Bell diagonal states on a two qubit system. 
In particular we will discuss the case of Werner states. 
Let us start with a short introduction to these kinds of 
states and briefly recall same basics about the fundamen- 
tal operations used in the hashing/breeding protocol. 

For a two qubit Hilbert space Ti — C 2 (g> C 2 there exists 
a basis of maximally entangled states given by the so 
called four Bell states: 
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The projectors onto these Bell states will be denoted by 
Pij = IV'y'XV'yl- We will in the following consider states 
of the form 

l 

P\ = ^ ^klPkh (5) 
l,k=0 

which are called Bell diagonal states. These states 
are paramerized by the four eigenvalues A := 
{A o, Aoi, A 10 , An} . Bell diagonal states play an impor- 
tant role in entanglement theory 0, 0, Hfl > especially in 
distillation theory. Every entangled two qubit state can 
be transformed to an entangled Bell diagonal states by 
means of LOCC operations |2l|. So the understanding of 
distillation protocols for Bell diagonal states gives a deep 
insight in the distillation of arbitrary states. 

A Bell diagonal states is separable, if and only if none 
of its eigenvalues exceeds ^. It is well known, that every 
entangled Bell diagonal state can be distilled by a combi- 
nation of the recurrence and the breeding/hashing proto- 
col 2], but the distillation rates archived so far, seem to 
be far away from an optimum and are much to low to be 
used as a good lower bound for distillable entanglement. 

A Bell diagonal state is called a Werner state 0, 0| , 
if all its eigenvalues Ay except one, e.g. Aoo are equal. 
Such a state can be written as 

p/ = /Poo + - Poo) 

The free parameter / = Aoo is called fidelity. A Werner 
state is entangled, if and only if / > 0.5. 

As in the case of the known hashing, breeding or recur- 
rence protocol, our protocol will completely stay in the 
framework of Bell diagonal states, i.e. it will only con- 
sist of operations, that map many copies of Bell states 



to many copies of Bell states. In detail, we will use only 
bilateral CNOT operations and local measurements. 

An essential ingredient for any distillation protocol act- 
ing on two qubit systems is the CNOT operation. The 
CNOT operation is defined by 

C\i,j) = \i,(i+j)), (6) 

where the first tensor factor is called the source and the 
second the target. The addition (i + j) should be read 
as modulo 2. It is readily verified that a bilateral CNOT 
operation (BCS), where both parties in a bipartite system 
apply CNOT operations locally on a tensor product of 
two Bell states, acts as 

(C<g> C)|V>ij) <8> IV'/w) = \1>ij+i) <8> \i>k+i,i), (7) 

here the first tensor product on the l.h.s. in Q corre- 
sponds to the Alice|Bob split, whereas the others cor- 
respond to the source|target split. A bilateral CNOT 
operation maps two copies of a Bell state again to two 
copies of a Bell state. 

In the framework of Bell states, i.e. maximally en- 
tangled states, every outcome of a local measurement 
on Alice's or Bobs side is completely random. There- 
fore, local measurement makes only sense, if Alice and 
Bob compare their result. If Alice and Bob make both a 
measurement in the |0), |1) basis, the difference of their 
outcomes will tell them whether it was one of the Bell 
states V'oojV'oi ° r one of the states ipw,tpn- So Alice 
and Bob can "measure" together the "i" of an unknown 
Bell state ipij. In the same way they can measure "j" 
using the |0 + 1) , |0 — 1) basis. We will refer to such local 
measurements as local Bell measurements. 



III. KNOWN PROTOCOLS 

Our new protocol is based one the known hash- 
ing/breeding protocol and the recurrence protocol. To 
explain the new protocol it is extremely helpful to give 
a briefly sketch of these to methods. Later on we will 
explain our new results. Anybody feeling quite familiar 
with these protocols can immediately move to section llVl 



A. The recurrence method 

The recurrence method takes as input two copies of 
a Bell diagonal state p\, one called the target state, 
the other the source state. The idea is to apply a bi- 
lateral CNOT operation on two copies of the state p\ 
and then making a local Bell measurement on the target 
state. The source states is kept whenever the measure- 
ment outcomes of Alice and Bob coincide, otherwise it 
is discarded. The overlap of the resulting state with the 
maximally entangled states increases, if the original over- 
lap was larger than 1 /2, which can always be obtained for 
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entangled Bell diagonal states. The protocol was origi- 
nally introduced only for Werner states, where at the end 
of the protocol the resulting state is mapped to a Werner 
state again. By iterating this method one can produce 
from a entangled Werner state (Bell diagonal states) a 
state that is arbitrarily close to a maximally entangled 
state. 

Note that the recurrence method alone does not lead 
to a non-zero rate since in every round we destroy or 
discard at least half of the resources (all the target states) 
and maximally entangled states are only obtained in the 
limit of infinitely many rounds. To come to a rate, the 
resulting states after a finite number of recurrence steps 
are distilled by the hashing/breeding protocol. 

B. The breeding protocol 

The breeding protocol is an entanglement assisted dis- 
tillation protocol adapted to Bell diagonal sates. In addi- 
tion to the state p\ Alice and Bob share arbitrarily many 
maximally entangled states, which they can use during 
the distillation process. At the end of the protocol they 
have to give back the maximally entangled states they 
abused during the protocol. 

Assume that Alice and Bob share n copies of a Bell 
diagonal state p\ 

pT= J2 ^ir-AuAii®-®4i„' (8) 

k\...k n ,li...l n 

An appropriate interpretation of Eq.JSJ) is to say that 
Alice and Bob share the state 

P klh ®---®P kn i n :=P § (9) 

with probability X^h ■ ■ ■ Afc„;„. Such a sequence of Bell- 
states can be identified with the string 

S= (ki,h,...,k n ,l n ). (10) 

Note that if Alice and Bob knew the sequence S, they 
could apply appropriate local unitary operations in order 
to obtain the standard maximally entangled state P^ n 
and thus gain n ebits of entanglement. 

It was shown in 0, that given such a string of Bell 
states and one extra maximally entangled state Poo one 
can check an arbitrarily parity of the string S, without 
changing or disturbing the sequence of Bell states. This 
is done by applying a sequence of bilateral CNOT oper- 
ations with the extra maximally entangled state acting 
as target states, and at a time one state of S as source 
state. The sequence of Bell states is unchanged, but the 
maximally entangled state Poo changed to P^o, where x 
can be any parity check of the vector S, i.a. x can be 
chosen to be 

x = J2 S i M i = (S\M), (11) 



where M is an arbitrarily vector with vector components 
£ 0,1. Note that Eq. ifTTl) has to be read modulo 2. 
By a local Bell measurement of the target state Alice 
and Bob can gain the information x, destroying the extra 
entangled state. For more details see [Z]. To such a single 
operation we will refer as parity check M. Remember 
that each such parity check cost Alice and Bob one ebit, 
i.a. one copy from their pool of maximally entangled 
states. 

The main idea of the breeding protocol is to repeat 
such parity checks until the full sequence S is known. 
If Alice and Bob did need m parity checks to identify 
a sequence of 2n bits (n qubits), then they gain n — m 
maximally entangled states, giving them a distillation 
rate per copy of 1 — m/n. 

This identifying process of S is done in the limit of 
the numbers of copies n going to infinity. This gives 
the advantages to restrict in the identifying process to so 
called typically codewords S |14|. Note that at this stage 
the whole distillation process is translated into a classical 
problem: Given an classical bit string S generated by a 
probability distribution (Ay), how many parity checks 
are necessary to identify the bit string ? The String S 
generated by many copies of the state p\ contains nS(p\) 
bits of classical information, where 

S(px) = -^A«logA ij (12) 

ij 

is the von Neumann Entropy of the state p\. With each 
parity check we gain one bit of this information ■ Per 
qubit we therefore need S(p) ebit of entanglement to 
identify it, leading to the well known hashing/breeding 
rate 

D H ashqubit(p\) = 1 - S(p\) = 1 - S(X). (13) 

The hashing/breeding rate has shown to be optimal for 
rank deficient Bell states, i.e., Bell diagonal states of rank 
two@. 

The same kind of protocol can be adapted to states 
that are diagonal in a tensor product basis of Bell states, 
i.e. for states that are diagonal in a basis of the form 

% = ^hh ® 4>hh ■ ■ ■ <Pi m jm , ( 14 ) 

i.e. states of the form a\ = YjtiX^P^. In this case 
one copy of a state generates not a two bit (one qubit) 
string, but a 2m bit (n qubit) string. Taking n copies of 
the state we get a random 2nm bit string generated by 
the probability distribution (X^j). We can try to identify 
this string by doing parity checks in the same way we did 
before. The amount of parity checks per copy is in the 
same spirit given by S(a\), but if we identified one copy 
of the state we now gain m ebits instead of 1 ebit. The 
distillation rate for these states is therefore given by 

D Hash {a x ) = m- S{X). (15) 
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For more details see |l9J . A special type of states that are 
diagonal in such a basis are many copies of Bell diagonal 
states, e.g. o\ = p® n . But since the hashing/breeding 
rate l|15|l is additive we gain or lose nothing by applying 
a breeding protocol to several copies of a Bell state. 



IV. THE NEW PROTOCOL 

The new protocol is essentially an asymptotic version 
of a recurrence step followed by the breeding protocol. 
The new idea is to take many copies of the state p and 
start by distilling states which have the 'same parity'. 



A. Distill parity states 

In the breeding protocol the goal is to get the full in- 
formation "if for every state ipij. One can also set the 
goal to get only a part of this information, e.g. we want 
only to know the i or the j or the parity i + j. This 
correspond to the the information we would get, if we 
made the corresponding parity check ({i,j}\rn) on one 
copy, e.g. m = 10, 01, 11, which would cost one ebit per 
copy. 

But this information can be obtained in a much 
cheaper way using exactly the same asymptotic technics 
as in the breeding protocol. We can write the state as 

P\ = [J-oPo + MiPi) ( 16 ) 

where 

{{hj}\rn)=k 

Pk = TT E X ^''r ( 18 ) 

Mfc — 

({ij}\m)=k 

If we take now n copies of the state p\ we get 

P\ n = X Pk 1 ---p-k n Pk 1 ®---®Pk n - (19) 

ki...k n 

Similarly to (JSJ an appropriate interpretation of Eq. I|19l) 
is to say that Alice and Bob share the state 

Pfcx <8>---®Pfc n , (20) 

which can be identified with a bit string 

S' = (k 1 ,...,k n ). (21) 

To get the information about S" in the same way we get it 
for the string S, we need to make arbitrary parity checks 
M' on the vector S' . Fortunately, S' and S described ex- 
actly the same sequence of Bell state, the only difference 
is that S' contains not the full information. Thus we can 



translate any parity check M' on S' to a parity check M 
on S by the simple rule 

M2i-i=m 1 ,M 2 i = m 2 (22) 

whenever M[ = 1 and 

M«-i = 0, M 2i = (23) 

whenever M[ = 0. It is readily checked that we can make 
this way every parity check M' on S' paying on ebit of 
entanglement. To identify S" in the limit of many copies 
we therefore need S(poiPi) ebit of entanglement. 

So given a state /?, we can decompose the state into po 
and pi with probability po,pi by paying S(po,p,i) ebit 
per copy. Doing such a step in our protocol we will refer 
as an asymptotic parity check rn . In a completely analog 
way we define asymptotic parity checks for states that 
are diagonal in the basis {HJ. The parity vector m is in 
this case a 2m bit string. The rule to translate parity 
checks is given by 

M{m-l)i+l,...,mi = ™ (24) 
whenever M[ = 1 and 

M( m ^r)i+i,...,mi = (25) 

whenever M[ = 0. denotes a vector of length m con- 
taining only zeros. 

If Alice and Bob make enough asymptotic parity 
checks, they gain the full information about every copy, 
making this procedure equivalent to a distillation. In- 
deed, the original breeding protocol consist of two of such 
asymptotic parity checks. First a '10' asymptotic par- 
ity check and afterwards a '01' asymptotic parity check. 
Since for the entropy holds 

S(X) = (A + ... + A m )5([A ,...,A m ]) (26) 
+ (A m+1 + ... + A„)S'([A m+1 ,...,A„]) (27) 
+ 5'(A 1 + ... + A„ l ,A m+ i + ... + A„), (28) 

we gain or lose nothing by doing the distillation in several 
asymptotic parity checking steps. Here SQpi, . . . ,p n ]) 
denotes the entropy of the normalized probability distri- 
bution, i.e. S(\pi,...,p n }) := S(pi/N,...,p n /N) with 

B. The improved protocols 

The key of our new distillation protocols is to distill 
several copies of a Bell diagonal state o\ = pf m , by a 
sequence of asymptotic parity checks. After each such 
step, we get two kind of states, the one that pass the 
asymptotic parity check (parity equal zero) and the one 
that fail the test (parity equal one) . Instead of continuing 
the distillation by testing further parities, we consider 
two new possibilities, 
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• We can decide to drop some of the states, depen- 
dent on the outcome of an asymptotic parity check. 
Indeed, this improves our distillation rate, iff the 
state we drop has a negative breeding rate, i.e. 
m-S(p) < 0. 

• We make a local Bell measurement on one of the m 
two qubit systems. Dependent on the measurement 
output we get a new m — 1 two qubit system state. 
Before doing the measurement, we also allow to 
apply Alice and Bob local unitaries. But we restrict 
to such unitaries, that map many copies of Bell 
states again to many copies of Bell states. 

1. Asymptotic recurrence 

First we present a protocol, that is very similar to mak- 
ing one recurrence step and afterwards distilling the state 
with the breeding protocol. The main difference is, that 
the recurrence step is somehow made in an asymptotic 
way. We take two copies of a Bell diagonal p\ . Then we 
asymptotically check the parity 1010 of these two copies. 
The state passes this test, if it is in one of the states 

0000, 0001, 0100, 0101, 1010, 1011, 1110, 1111, 

it fails the test if it is in one of the states 

0010, 0011, 0110, 0111, 1000, 1001, 1100, 1101. 

Therefore, pf 2 passes the parity check with probability 
Peven = (Aoo + Aoi) 2 + (Aio + An) 2 and is afterwards in 
the state 

Peven = ^ A, ,A,;/', ,. ® P a . (29) 

Peven . . , 
I] I 

With probability p dd = 2(A o + A i)(Ai + An) it fails 
and is is in the state 

Podd = — A,,A , . | ;/',, <g) P( i+1 )l (30) 
Podd . ., 

This step costs S(p a dd, Peven) ebit per copy of p® 2 . Sim- 
ilarly to the recurrence protocol, we decide to drop one 
of these two possible outcomes. A calculation for Werner 
states shows, that p dd has a negative breeding rate for 
every entangled Werner states pf. So we decide to drop 
all odd states and continue to distill the even states. The 
distillation rate is then given by 

- S(p dd,Pev en ) T Peven ))■ (31) 

S{p dd, Peven) is what we have to pay for the first parity 
check. Afterwards we continue with probability p even to 
distill p eV en ■ Normalized to one copy of the state p\ we 
obtain 

S(poddj Peven) / 2 4" Peven even )/2), (32) 
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fidelity 

FIG. 1: Distillation rates for Werner states. 

which is plotted in Fig^Jfor Werner states. Surprisingly, 
we get an improvement to the known breeding protocol 
over the full range of the fidelity and not only for low 
fidelities, like it is known for combined hashing recurrence 
protocols. 

2. the 2-copy rate 

Although the breeding rate of the state p dd is nega- 
tive, the state may be still entangled and even distillable. 
So one can improve the distillation rate, by applying an 
alternative distillation protocol onto p D dd- One way to 
get a positive rate out of p Q dd is to make a local Bell 
measurement on one of the two qubit systems. If the 
measurement outcomes of Alice and Bob do not coincide 
(correspond to the states 10 or 11), they knew that the re- 
maining state has to be 00 or 01, because they knew, the 
overall state had an odd parity in the first bit of each two 
qubit system. If the measurement outcomes coincide (00 
or 01), they knew the remaining state in one of the states 
10, 11. So for both outcomes they end up in a rank two 
Bell diagonal state, for which they knew, that the breed- 
ing protocol gives them the optimal distillation rate. In 
fact, the mixture of 00, 01 is always equally weighted and 
therefore separable, so they can drop it. But the mixture 
of 10, 11 can give positive contribution to the overall dis- 
tillation rate. The distillation rate obtained with this 
protocol for Werner states is plotted in Fig^ 

The distillation rate for arbitrary Bell diagonal two 
qubit states using this protocol is easily calculated to be 

D 2c (\) = l-S(p) (33) 
+ ^[5([A 00 , Aoi]) + 5([A n , A 10 ])] (34) 

So it is a real improvement to the known hash- 
ing/breeding rate, since we beat this rate by the extra 
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fidelity 

FIG. 2: Distillation rates for Werner states. 

term (|34p. which is always larger or equal to zero. In- 
deed, l|34f> is zero if and only if the state has rank less 
than two. We have a strictly positive improvement for 
all Bell diagonal states, with the only exception for those 
cases, where the hashing/breeding rate was known to be 
optimal. 



C. Further optimization 

What rates can we achieve using protocols consisting 
only out of asymptotic parity checks and local Bell mea- 
surements ? 

We can start from more than two copies of the state 
and construct in the same spirit protocols consisting out 
of asymptotic parity checks and local Bell measurements. 
The result of one such protocol starting with four copies 
p® 4 is plotted in Fig[2] for Werner states. Using self- 
recurrent programming, it is in principle possible to prove 
optimality of such schemes within the class of operations 
described above. Note however that the computational 
cost for doing this optimization is superexponential in the 
number of copies involved in the protocol, and proving 
optimality therefore does not seem to be feasible for more 
than 6 copies. It is however clear that taking more copies 
can only increase the distillation rate. Unfortunately, we 
did not manage to find an easy way to construct rea- 
sonable good protocols for more and more copies; in the 
asymptotic limit, this would maybe even lead to an exact 
expression for the entanglement of distillation. 

On Werner states the above 2-copy protocol is essen- 
tially the best possible protocol using asymptotic hashing 
steps and local measurements. We have done an opti- 
mization for Werner states over all protocols, which in- 
clude arbitrary asymptotic hashing steps, local Bell mea- 
surements and arbitrary local unitary operations, map- 




FIG. 3: Distillation rates for Werner states. 



ping multi-copies of Bell states into multi-copies Bell 
states. The number of such protocols is finite. The 
Asymptotic hashing steps can be parameterized by the 
2n bit string fh. All local unitaries that map multi-copies 
of Bell states to multi-copies of Bell states have been 
characterized in 6] . For two copies of Bell states there 
exists up to local equivalence 120 different possibilities. 
The number of possible asymptotic parity checks or local 
Bell measurements that are possible, until the state is 
known or completely destroyed is also finite. 

So one has to test for a given Bell diagonal state a fi- 
nite (but very large) set of possible protocols. The result 
of this optimization for all protocols starting from two 
copies of a Werner state is plotted in Fig[3J For high fi- 
delities the above 2-copy protocol gave the best results. 
For low fidelities the standard recurrence followed by the 
optimized hashing, which is included in this kind of pro- 
tocols, is optimal. 

For more than two copies of the state we were not able 
to do the full optimization over all possible protocols, 
because the number of protocols is too large. By making 
a good guess, we could find protocols up to 5 copies giving 
further small improvements. But so far, we are unable 
to give a systematic way of producing n-copy-protocols. 

V. NON ENTANGLEMENT ASSISTED 
PROTOCOLS 

We will now show, how the above protocols can be 
transformed into protocols that do not need any pre- 
distillcd maximally entangled states. The idea is to start 
with an non entanglement assisted protocol to get a start- 
ing pool of maximally entangled states for the entangle- 
ment assisted protocol. To distill this starting pool, we 
will only use a sub- linear amount of copies, so that in the 
asymptotic limit, we will not affect the obtained rates. 
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In detail, we start with fc _1 y/n + n copies of the state 
p, where k > is the distillation rate obtained by any 
non entanglement assisted protocol, e.g. we can use sev- 
eral recurrence steps followed by the hashing protocol. 
We use this non entanglement assisted activating proto- 
col to distill y/n maximally entangled states out of the 
first k~ X ypn copies. At this step let us assume, that the 
activating protocol does this without any error, i.e. we 
get perfect maximally entangled states. 

We use these y/n maximally states as resource for our 
entanglement assisted protocol to distill (l + r)y/n copies 
of the state p gaining (1 + r)y/n new maximally entan- 
gled states. At this step we also assume the entanglement 
assisted protocol to work perfect for a finite amount of 
copies. Here r denotes the rate obtained by the entangle- 
ment assisted protocol. With these maximally entangled 
states we distill the next block of (1 + r) 2 y/n copies from 
the n copies of p and so on for all the rest of it. The ob- 
tained rate for this non entanglement assisted protocol 
will be r, independent of the rate k of the activating pro- 
tocol at the beginning, because the extra k^y/n copies 
of p will be vanish compared to n for n going to infinity. 

Of course, in contradiction to our assumption, none of 
the protocols will work perfect for any finite number of 
copies and the errors, that will occur, may accumulate 
and destroy the whole protocol. So to claim this above 
protocol to be a valid distillation protocol, we have to 
ensure that the success probability of the protocol goes 
to one if n goes to infinity. 

So we now want to bound the success probability of the 
protocol described above. First of all we only can guar- 
antee our protocol work, if the starting y/n maximally 
entangled states were correct, i.e. if the activating proto- 
col succeeded. Let us call this probability p(n), with p(n) 
going to zero, if n goes to infinity. Second we call q(n) 
the probability, that the entanglement assisted protocol 
works well. Then the probability that the above protocol 
works can be bounded by 

Psucc > p{y/n)q(y/n)^ i . 
In the worst case we have to repeat the entanglement as- 



sisted protocol y/n times successfully with only y/n copies 
of the state p as input. Indeed, this probability can go 
to zero, if q(n) scales in a wrong way. The probability 
p(y/n) is no problem at all, as long as it goes to one for 
large n. 

So we only have to ensure, that q(n') n with n 1 = y/n 
goes to one as n' goes to infinity. What we therefore 
need is an approximation of the scaling of the success 
probability q(n) for our new protocols. The entangle- 
ment assisted protocol described above will succeed, if 
the sequences correspond to so called typical sequences. 
The probability of being a typical sequence goes exponen- 
tially to one [2(|, so we can bound for n' large enough 
q(n') > (1 — ke" cn ). So the overall success probability 
can be bounded by 

Psucc >p(V^)(l~ke- c ^)^, 
which goes to one, if n goes to infinity. 



VI. CONCLUSION 

We have presented the first distillation protocol, where 
two way communication is included in an asymptotical 
sense. The distillation rates attained this way beat the 
known hashing/breeding rate over the whole range of en- 
tangled Bell diagonal states. Since the hashing/breeding 
protocol is the last step for all recurrence like distilla- 
tion schemes, we can improve all these distillation pro- 
tocols. Furthermore we proved how any entanglement- 
assisted distillation protocol can be converted into a non- 
entanglement-assisted distillation protocol with the same 
rate. An important open problem is to find a systematic 
way for constructing n-copy distillation protocols; this 
could ultimately lead to an exact expression of the en- 
tanglement of distillation. 
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